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Top Stories 

• Three Blackstone Group private equity fund advisers agreed to pay $38.8 million October 

7 to resolve allegations that they failed to disclose benefits they obtained via various fees. - 
U.S. Securities and Exchange Commission (See item 4) 

• North Carolina officials reported that the cause of a 500,000 gallon wastewater spill into 
the Carolina Shores was due to flooding of collection systems following heavy storms in 
the area. - WWAY 3 Wilmington (See item 14) 

• An injunction was granted October 7 against QLasers PMA and 2035 PMA prohibiting the 
manufacturing and distribution of “QLaser” devices after the devices were being 
distributed without Federal approval. - U.S. Food and Drug Administration (See item 15) 

• A suspect was caught several hours after crashing a stolen car near Fort Meade in 
Maryland October 8, forcing the closure of six schools and a reduction of operations at Fort 
Meade. - WUSA 9 Washington, D.C. (See item 18) 
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Energy Sector 

See item 23 

Chemical Industry Sector 

See item 23 

Nuclear Reactors, Materials, and Waste Sector 

1. October 7, Ogle County News - (Illinois) Byron Station Unit 1 back online. Illinois 
officials reported October 7 that Byron Generating Station Unit 1 reactor was restored 
to full power October 5 after undergoing a scheduled refueling outage that included 
safety inspections, equipment tests, and plant refurbishments to ensure the facility’s 
ability to provide clean, safe, and reliable electricity through the unit’s 18-month 
operating cycle. 

Source: http://www.oglecountvnews.com/2015/10/05/byron-station-unit-l-back- 
online/aed5sde/ 



Critical Manufacturing Sector 

2. October 8, Consumer Affairs - (National) GM recalls Chevrolet Traverse, GMC 
Acadia and Buick Enclave vehicles. General Motors issued a recall beginning 
September 30 for 29,295 model year 2016 Chevrolet Traverse, GMC Acadia, and 
Buick Enclave vehicles due to a windshield wiper issue in which the motor could 
overheat when used, increasing the risk of a fire. 

Source: http://www.consumeraffairs.com/news/gm-recalls-chevrolet-traverse-gmc- 
acadia-and-buick-enclave- vehicles- 1 008 1 5 .html 



For another story, see item 23 

Defense Industrial Base Sector 

See item 23 

Financial Services Sector 

3. October 8, CNET - (International) Samsung says customer payment data not 
affected by hack attack. Samsung released a statement October 8 reassuring 
customers that no payment data was at risk following a March hacking incident 
involving LoopPay, a company that Samsung acquired to set up Samsung Pay. The 
attack reportedly only targeted LoopPay’ s office network handling email, file sharing, 
and printing, and was possibly intended to steal the magnetic strip technology that the 
company developed. 

Source: http://www.cnet.com/news/samsung-savs-customer-payment-data-not-affected- 
by-hack-attack/ 
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4. October 7, U.S. Securities and Exchange Commission - (National) Blackstone 
charged with disclosure failures. The U.S. Securities and Exchange Commission 
announced October 7 that 3 Blackstone Group private equity fund advisers agreed to 
pay $38.8 million to resolve allegations that the advisers failed to disclose the benefits 
they obtained via accelerated monitoring fees and legal fee discounts. The company 
will distribute $28.8 million to affected fund investors. 

Source: http://www.sec.gov/news/pressrelease/2015-235.html 

5. October 7, Denver Post - (Colorado) US Capital partner barred from securities 
work, ordered to repay $10M. Colorado State securities regulators announced 
October 7 that a former US Capital partner was permanently banned from the securities 
industry and will pay $10.3 million after an investigation found that the company 
allegedly offered real-estate purchase loans to typically ineligible commercial 
borrowers by obtaining investments from individuals who were promised interest, 
when in reality the company used the funds as loans for at least 10 other companies that 
they owned. 

Source: http://www.denverpost.com/business/ci 28935273/us-capital-partner-barred- 
from-securities-work-ordered 

6. October 7, WTVJ 6 Miami - (Florida) Illegal credit card manufacturing operation 
uncovered in North Miami. Miami-Dade police recovered at least 200 credit cards as 
well as card encoding equipment in a raid on a North Miami home while serving an 
arrest warrant October 7. A resident of the home was identified as a convicted felon 
and taken into custody. 

Source: http://www.nbcmiami.com/news/local/Illegal-Credit-Card-Manufacturing- 
Operation-Uncovered-in-North-Miami-331179402.html 

Transportation Systems Sector 

7. October 8, WCPO 9 Cincinnati - (Kentucky) Boone County deputies identify victims 
in deadly Florence crash. A portion Dixie Highway in Florence was shut down for 
approximately 4 hours October 8 while a crash reconstruction team investigated a fatal 
accident after a vehicle headed north veered off the roadway and struck a utility pole. 
One person died and two others were seriously injured. 

Source: http://www.wcpo.com/news/local-news/boone-county/florence/one-dead-after- 
crash-closes-dixie-highway-in-florence-kv 

8. October 8, KCTV 5 Kansas City - (Kansas) Woman, child killed in single- vehicle 
wreck near Edgerton. Both directions of Interstate 35 between Gardner and 
Sunflower roads in Johnson County were shut down for about 4 hours October 7 while 
officials investigated a single- vehicle accident that killed 2 people. 

Source: http://www.kctv5.com/story/30212149/2-killed-in-single-vehicle-wreck-near- 
edgerton 

9. October 8, WRAL 5 Raleigh - (North Carolina) Driver charged after wreck forces 
closure of US 401 in Garner. All lanes of U.S. Highway 401 in Gamer were shut 
down for approximately 8 hours October 8 after a vehicle lost control and hit a power 
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pole, injuring 2 people and causing a power outage in the area. 

Source: http://www.wral.com/wreck-shuts-down-us-401-us-70-in-garner/14955289/ 

10. October 7, Duluth News Tribune - (Minnesota) Truck spills 2,000 gallons of used 
motor oil in northwest Minnesota. Crews spent about 5 hours October 6 containing 
an estimated 2,000-gallon motor oil spill following a rollover accident involving a 
semi-truck on U.S. Highway 59 near Karlstad. Canadian Pacific Railway stopped rail 
traffic on tracks that run parallel to the highway for about 4 hours as a precaution. 
Source: http://www.duluthnewstribune.com/news/3855956-truck-spills-2000-gallons- 
used-motor-oil-northwest-minnesota 

11. October 7, KUSA 9 Denver - (Colorado) 1-270 reopens after fuel tanker rollover. 
Interstate 270 in Adams County, Colorado, was shut down in both directions for nearly 
8 hours October 7 after a fuel tanker overturned and spilled 2,500 gallons of fuel onto 
the roadway. The cause of the accident remains under investigation. 

Source: http://www.9news.com/storv/news/traffic/2015/10/07/fuel-tank-rupture-i-270- 
quebec-highway-85/73533250/ 

For another story, see item 23 

Food and Agriculture Sector 

12. October 8, U.S. Food and Drug Administration - (National) Whole Foods Market 
voluntarily recalls all cut wrapped and weighed Papillion Organic Roquefort 
cheeses because of possible health risk. Whole Foods Market issued a voluntary 
recall October 7 of Papillion Organic Roquefort cheese products cut and packaged in 
clear plastic wrap sold with Whole Foods scale labels after routine sampling found 
Listeria Monocytogenes in a whole, uncut wheel of cheese. The products were sold 
nationwide at all Whole Foods Market stores. 

Source: http://www.fda.gov/Safety/Recalls/ucm466185.htm 

13. October 7, U.S. Food and Drug Administration - (National) New England Natural 
Bakers Inc. issues voluntary allergy alert on undeclared milk, wheat and tree nuts 
(pecans) in Coconut Cranberry Granola. Greenfield, Massachusetts-based New 
England Natural Bakers, Inc., issued a voluntary recall October 7 for one specific lot of 
Trader Joe’s Coconut Cranberry Granola due to misbranding and undeclared milk, 
wheat, and tree nuts discovered following a customer complaint. The products were 
distributed to Trader Joe’s stores in several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm466182.htm 

Water and Wastewater Systems Sector 

14. October 7, WWAY 3 Wilmington - (North Carolina) Rain blamed for 500,000-gallon 
wastewater spill. Brunswick County officials reported that the cause of a 500,000 
gallon wastewater spill into the Carolina Shores from the equalization basin at the 
Carolina Shores Wastewater Treatment Plant was due to flooding of collection systems 
following heavy storms in the area. The discharge began October 2 and continued 
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through October 5 and likely reached receiving waters designated as an unnamed 
tributary to Persimmon Swam in the Lumber River Basin. 

Source: http://www.wwavtv3.com/2015/10/07/rain-blamed-for-500000-gallon- 
wastewater-spill/ 

Healthcare and Public Health Sector 



15. October 7, U.S. Food and Drug Administration - (South Dakota) Federal judge issues 
permanent injunction against South Dakota laser manufacturer. The U.S. Food 
and Drug Administration (FDA) was granted a permanent injunction October 7 against 
2035 Inc., doing business as QLasers PMA and 2035 PMA, and its owner prohibiting 
the manufacturing and distribution of “QLaser” devices after authorities accused the 
company of promoting the devices with false and misleading claims that they treat 
cardiac arrest, cancer, HIV/AIDS, and several other diseases and disorders. The FDA 
stated that the devices were being distributed without its approval and that the company 
can reinstate manufacturing and distribution of the devices once it gains premarket 
approval or clearance. 

Source: 

http://www.fda.gov/NewsEvents/Newsroom/PressAnnouncements/ucm466044.htm 

16. October 7, KSNV 3 Las Vegas - (Nevada) Patient of fake doctor relives her trip to 
the ‘surgical house of horrors.’ Officials reported October 7 that police arrested a 
man who was posing as a doctor and seized bags of blood, syringes, and scalpels from 
his residence near Nellis and Washington in Nevada. An investigation is ongoing and 
the Southern Nevada Health District is asking patients seen by the suspect to come 
forward. 

Source: http://www.news31v.com/content/news/local/story/Patient-of-fake-doctor- 
relives-her-trip-to-clinic/31YmGvV3mO-3whYMmkBPBg.cspx 

17. October 5, WCAU 10 Philadelphia - (New Jersey) Nurse reuses syringe while giving 
flu shots to patients at NJ clinic: Officials. TotalWellness announced October 5 that a 
contracted nurse administered flu vaccinations to 67 employees of Otsuka 
Pharmaceutical in New Jersey and failed to follow proper procedures when they reused 
the same syringe. The incident is under investigation after health officials also reported 
that the nurse may have given a dose of the vaccine that was less than recommended 
and urged employees to get another flu shot. 

Source: http://www.nbcphiladelphia.com/news/local/Svringe-TotalWellness-Nurse- 
Flu-Vaccinations-West-Windsor-New-Jersey-330777592.html 

Government Facilities Sector 

18. October 8, WUSA 9 Washington, D.C. - (Maryland) Carjacking suspect who crashed 
near Ft. Meade caught. Authorities caught a carjacking suspect several hours after the 
suspect crashed a stolen car near Fort Meade’s Rochenbach Gate in Anne Arundel 
County October 8, forcing the closure of 6 schools and the reduction of operations at 
Fort Meade. 

Source: http://www.wusa9.com/storv/news/local/mai~yland/2015/10/07/cariacking- 
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suspect-sought-after-car-crashes-near-ft-meade/73558442/ 



19. October 7, WGN 9 Chicago - (California) 10 students taken to hospital after pepper 
spray incident at West Side school. Oscar DePreist Elementary School in Chicago 
was evacuated and 10 students were transported to an area hospital for symptoms 
October 7 after a form of pepper spray was discharged in the building during a fight 
between 2 students. 

Source: http://wgntv.com/2015/10/07/10-students-taken-to-hospital-after-pepper-spray- 
incident-at- west-side-school/ 

20. October 7, WLOX 13 Biloxi - (Mississippi) School bus accident sends 15 to the 
hospital with minor injuries. An October 7 accident involving a school bus and 
another vehicle on Highway 49 in Harrison County caused 15 Harrison Central High 
School students to be transported to an area hospital with minor injuries. 

Source: http://www.wlox.com/story/302061 19/school-bus-accident-sends-15-to-the- 
ho spital- with-minor-inj uries 

21. October 7, WTOC 11 Savannah - (Georgia) 37 sent to hospital after HAZMAT 
incident at Myers Middle School. Myers Middle School in Savannah was evacuated 
after 36 students and the assistant principal were affected by a freon leak in the air 
conditioning system October 7. School officials continue to assess the situation after 
the air was shut off while crews inspected the system and cleared the building, and 
Johnson High School was evacuated as a precaution. 

Source: http://www.wtoc.com/storv/30208735/37-sent-to-hospital-after-hazmat- 
incident-at-myers-middle-school 

For another story, see item 23 

Emergency Services Sector 

See item 26 

Information Technology Sector 

22. October 8, Securityweek - (International) New collision attack lowers cost of 
breaking SHA1. A team of experts from Centrum Wiskunde & Informatica in Europe, 
Inria in France, and Singapore’s Nanyang Technological University discovered that 
hackers could execute a “freestart collision” attack to break the full secure hash 
algorithm 1 (SHA1) cryptographic hash function within 10 days for a cost of $75,000 - 
$120,000 using graphics cards and computing power from Amazon’s EC2 cloud. 
Previous research estimated that the cost to break the algorithm would be 
approximately $700,000 in 2015 and $173,000 in 2018. 

Source: http://www.securitvweek.com/new-collision-attack-lowers-cost-breaking-shal 

23. October 8, Softpedia - (International) Operation Cleaver hackers return, now used 
Linkedln to target victims. Security researchers from Dell’s SecureWorks Counter 
Threat Unit Threat Intelligence team discovered that a group that they observed 
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building a network of fake Linkedln user profiles to target aerospace, defense, military, 
chemical, energy, government, education, and telecommunications organizations 
worldwide, appear to be the same or affiliated the group who carried out Operation 
Cleaver in 2014, which targeted critical infrastructure points worldwide. 

Source: http://news.softpedia.com/news/operation-cleaver-hackers-retum-now-use- 
linkedin-to-target-victims-494062.shtml 

24. October 8, IDG News Service - (International) Journalist convicted of helping 
Anonymous hack the LA Times. A California journalist who previously worked for 
Reuters was convicted October 7 for his role in a conspiracy to make unauthorized 
changes to a computer and the transmission of malicious code on the Los Angeles 
Times’ Web site by passing login credentials enabling access to a content management 
system to an Anonymous hacking group member in December 2010. 

Source: http://www.computerworld.com/article/2990491/cvbercrime- 
hacking/journali st-con victcd-of-hel pi ng-anonymous-hack-thc-la- 
times.html#tk.rss security 

25. October 7, Securityweek - (International) Developers of mysterious Wifatch 
malware come forward. The group behind the “benevolent” Linux.Wifatch malware 
that was observed infecting tens of thousands of routers, Internet Protocol (IP) cameras, 
and other devices with the apparent purpose of protecting them, published the Wifatch 
source code and revealed themselves as “The White Team,” claiming it was an 
altruistic project. 

Source: http://www.securitvweek.com/developers-mysterious-wifatch-malware-come- 
forward 



For another story, see item 3 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

26. October 7, KSBW 8 Salinas - (California) Outage affecting 1000 residents in Big 
Sur. Over 1,000 residents in Big Sur were without Internet, landline, or cell phone 
service, including 9-1-1 capability October 6 due to a cut fiber line in Greenfield that 
routes to the microwave radio dish that powers Big Sur. The county of Monterey and 
AT&T worked to restore service, and repairs were expected to be completed by 
October 7. 

Source: http://www.ksbw.com/news/outage-affecting-100Q-residents-in-big- 
sur/35704544 



For another story, see item 23 
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Commercial Facilities Sector 



27. October 7, MissionLocal.com - (California) Pepper spray prompts evacuation in SF 
Mission. A San Francisco fire official reported that 120 people were evacuated for 
approximately 2 hours October 7 from a Salvation Army building, which houses 
residences and office space, after a suspected hazardous material odor was detected by 
staff. No injuries were reported and officials believe that the odor derived from a 
donated item that discharged pepper spray or mace. Fire department personnel 
evaluated 14 people on site. 

Source: http://missionlocal.org/2015/10/suspected-hazardous-materials-cause- 
evacuation/ 



28. October 6, U.S. Department of Labor - (Massachusetts) Falling boxes of patio 

furniture at Massachusetts Big Lots store strike employee, causing hospitalization. 
The Occupational Safety and Health Administration cited Big Lots Stores Inc., October 
2 for 2 repeated violations at its Danvers, Massachusetts facility after an investigation 
revealed numerous boxes of stock were stacked high in unstable conditions in the 
storeroom and that aisles were clogged by broken materials following an incident in 
which an employee was hospitalized when boxes of patio furniture fell and struck him 
in the store’s stockroom. Penalties total $66,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28866 

Dams Sector 



Nothing to report 
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NTAS 

MjiioMlT'-wrUm 4>lviti>ry S)«i«ni 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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